CVE-2015-2687

medium

Description

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

References

Advisories

https://review.openstack.org/#/c/338929/

https://bugzilla.redhat.com/show_bug.cgi?id=1205313

https://bugs.launchpad.net/nova/+bug/1419577

http://www.securityfocus.com/bid/77505

http://www.openwall.com/lists/oss-security/2015/03/25/3

http://www.openwall.com/lists/oss-security/2015/03/24/10

Details

Source: Mitre, NVD

Published: 2017-08-09

Updated: 2025-04-20

Risk Information

CVSS v2

Base Score: 1.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 4.7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

CVSS v4

Base Score: 6

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N